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ABSTRACT 



A system for remote resetting of franking meters is 
disclosed in which the meters communicate with a cen* 
tral resetting terminal. A transaction identification niun- 
ber (IDN) is generated at the resettiag terminal and also 
at the meter. Initially the IDN*s match. The IDN at the 
terminal is incremented when the terminal sends a re- 
credit signal to the meter and accounts for the recredit 
amount The IDN at the meter is incremented when the 
descending register of the meter is recredited. In re- 
sponse to a recredit request which includes the meter 
IDN the terminal compares the IDN from the meter 
with that stored at the terminal If the IDN's match the 
terminal recredits the meter with the requested amount 
If the comparison indicates that the IDN from the meter 
was not incremented in the preceding recredit routine, 
indicating that the meter was not recredited in the pre- 
ceding routine, the terminal recredits the meter with the 
amount of the preceding request. 
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^ meter to enable the meter to read the credit data. The 

FRANKING METER SYSTEM meter enters audit data into the module and upon return 

« . ™^ «^ of the module to the postal authority, the postal author- 

BACKGROUND OF THE INVENTION ity reads the audit daU and is enabl^ to out audit- 

This invention relates to franking meter systems in ^ ing of the usage of the meter. Thus the meter does not 

which franking machines are utilized to frank postal need to be removed from the franking machine and 

items with a value of postage charge and in which fund- resetting is effected at the user's location. All data for 

ing of the franking machines with credit for use in the resetting of credit and auditing is carried by the 



franking is effected remotely. module which is of sufficiently small size to be sent as a 

Meters of frankmgmachmes for frankmg post^ Items 10 ^ ^^^^ ^^^^^ ^^^^^ 
and which are operated on a prepayment system are ^ ^ * t j / vuc yu^uu 
provided with a credit register which stores a value of f ^^"^ '^^^^ ^^f^" ^ P^^^^^ '^"^^ 
credit for which payment has been made to a postal data transported m the module, the module also 
authority and which remains available for use in frank- cames a code m the form of a pseudo-random number, 
ing of mail items. Initially, upon payment to the postal ™* stored in the resetting computer and is 
authority, a value is entered into the credit register writteninto the module together with the credit up-date 
corresponding to the payment As items are franked > value. The franking meter stores a code corresponding 
with postage charges, Uie value in the credit register is to that stored in the resetting computer. When the mod- 
decremented by the postal charges and hence the decre- ule is connected to the franking meter, the code in the 
mented value represents the value remaining available 20 module is compared with the code stored in the meter, 
for franking of postal items. When the value in the If there is a match, the data in the module is accepted as 
credit register has reduced to a predetermined value, valid. The code is changed after completion of each 
which may be zero or a preset hi^^r value, the ac .^setting transaction to prevent fraudulent resetting of 
countmg ana control circmts^ot the trankmg meter 

meter. 

prevent further frankmg operations until the user of the 25 y ^♦i. i * ^ 
franking machine has purchased further credit from the . "^.^^ ^y^*^' ^^^S of the credit reg- 
postal authority and the value in the credit register has ^ ^^^^ meter is effected remotely by con- 
been incremented by the value of purchased credit For °ectmg the frankmg meter, by means of a modem, to the 
reasons of security, the user of the machine is not per- telephone network to provide direct communication 
mitted to have access to the interior of the franking 30 with the resetting center computer. The procedure 
meter or to any of the accounting circuits of the meter. necessary for remote resetting of the register requires a 
According the addition of credit to the credit register is sequence of messages to be passed between the franking 
not permitted to be effected by the user of the machine. meter and the resetting centre computer to enable the 
In known franking machines, the fr^inking meter is a resetting centre computer not only to reset the credit 
detachable module and when additional credit is to be 35 value in the credit register but also to receive the ac- 
entered in the meter the module is taken to the postal counting values stored in the other registers of the me- 
authority for resetting of tiie credit register. When the ter. If franking transactions were permitted to be car- 
meter is returned to the postal autiiority for r^etting ried out during the period in which the resetting proce- 
the credit register, the postal authonty ,s enabled to ^ure is tikmg place, accounting values stored in the 
effec an auditmg operation m^^^ 40 ^^^^^^ the franking meter would be changed in 
credit register and other registers such as a tote register * , , * ""vi*-* w^^^w ^luui^cu m 
which records tiie total value of franking issued by tiie accordance with the postage value used m any frankmg 
meter and an item counter which records the number of transactions and accordmgly auditing checks carried 
items franked by the meter are read. The auditing oper- detcnmne that the up-date credit value has been 
ation enables the postal authority to check usage of the 45 Properly entered into the credit register and that the 
machine as recorded by the various registers to ensure accounting data in other registers is in agreement could 
that the data in the registers is in agreement with usage be indeterminate. Accordingly in a previously proposed 
of the machine since the preceding auditing. system, which is the subject of U.S. Pat. No. 5,077,792, 
The need to take the meter to a postal authority cen- after initiation of the resetting procedure the resetting 
tre is inconveni«it and time consuming to users of 50 computer sends a message to the franking meter which 
franking machines. The machine is not operable while locks and inhibits the franking machine from carrying 
the meter is removed for resetting and hence users need out franking transactions. Upon completion of the reset- 
to anticipate their need for credit in order to prevent ting procedure after an audit of the register values of the 
interruption to franking of mail items. In addition, tiie franking meter has been satisfactorily carried out by the 
postal authority has to pro^ide a resetting service at a 55 resetting computer the resetting computer sends an 
large number of locations, for «camp e at every mam ^^^^ , ^^^^ ^^^^^ 

post office, m order to provide adequate accessibility of ^„riIZvi «7i.-t ^f- 

the serviS to customers. ^ can^ out frantog transactions. AVhile this system is 

In order to overcome the inconvenience of removing ^^^^<'^^^ ^^S^ ^o preventing use of tiie frank- 
the meter and taking it to a postal authority resetting 60 "'^ machme whUe a resettmg procedure is m progress it 
ccnuc remote resetting systems have been proposed if considered tiiat it may be disadvantageous in that if 
and are used. In one system, vviiich is the subject of ^ * failure in the resetting procedure due for ex- 
United Kingdom Patent No. 2173738, an electronic ample to equipment failure or a to failure in the commu- 
storage module is utilised to carry data between a postal nication link between the franking meter and the reset- 
authority resetting centre and franking machines at 65 ting centre computer the franking machine will remain 
users locations. The module has credit data entered into locked and unavailable for use in franking mail items 
and stored in it by the postal authority and after receipt even though there is sufficient credit available in the 
thereof by the customer, the module is connected to the credit register for franking fiirther mail items. 
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cTT\>nuf AUTCQ OT? THF iMVPNTTTOM register of franking meter apparatus in a series of reset- 

SUMMARIES OF THE INVENTION transactions includes means to generate a first indi- 

According to a first aspect of the invention a method cator signal; means to receive a second indicator signal 
of remotely resetting credit available for use in the from franking meter apparatus, said first and second 
franking transactions of franking meter apparatus, said 5 indicator signals initially having a predetermined rela- 
franking meter apparatus including a descending credit tionship; means operable in each current credit resetting 
register storing a value of credit available for use in transaction to compare said first and second indicator 
franking transactions, includes the steps of generating a signals; means operative in response to detection of said 
first indicator signal at the meter; generating a second predetermined relationship between said first and sec- 
indicator signal at a remote resetting terminal apparatus; 10 ond indicator signals to transmit a current credit reset 
establishing communication between the franking meter signal relating to the current credit resetting transaction 
apparatus and the remote resetting terminal apparatus; an operative in the absence of detection of said prede- 
transmitting the first indicator signal from the meter to termined relationship to transmit a preceding credit 
the terminal; at the terminal apparatus comparing the reset signal relating to a credit reset transaction inmiedi- 
first and second indicator signals; in response to detec- 15 ately preceding the current transaction, 
tion of a first relationship between said first and second According to a fourth aspect of the invention a frank- 
indicator signals transmitting a first credit reset signal ing meter system comprises at least one franking meter 
from said terminal apparatus to said meter apparatus to apparatus and remote resetting terminal apparatus; 
enable the meter apparatus to reset the value of credit communication means providing commimication be- 
available for franking stored in the credit register of said 20 tween the meter apparatus and the remote resetting 
meter apparatus by adding a first credit update amount terminal apparatus; said franking meter apparatus in- 
to said value of credit and in response to detection of a eluding a credit register to store a value of credit avail- 
second relationship between said first and second indi- able for use by said meter apparatus in franking transac- 
cator signals transmitting a second credit rest signal tions to frank mail items with a postage charge; means 
from the terminal apparatus to the meter apparatus to 25 operable to reset the value of credit in the credit register 
enable the meter apparatus to reset the value of credit to a new updated valu^ means to generate a first indica- 
available for franking stored in the credit register of the tor number and to increment said indicator number in 
meter apparatus by adding a second update credit response to resetting of credit in the credit register; said 
amount to said value of credit. remote resetting terminal apparatus including means 

According to a second aspect of the invention a 30 operable to carry out a credit resetting routing means to 
method of remotely resetting credit in a series of credit generate a second indicator number and to increment 
resetting transactions of credit available for use in frank- said second indicator number in response to completion 
ing transactions of franking meter apparatus, said frank- of said credit resetting routine; said first and second 
ing meter apparatus including a descending credit regis- indicator numbers initially having a predetermined rela- 
ter storing a value of credit available for use in the 35 tionship; comparison means to compare the first and 
franking transactions, includes the steps of generating a second indicator numbers; means operative in response 
first indicator signal at the meter; generating a second to said comparison means indicating said predetermined . 
indicator signal at a remote resetting terminal apparatus, relationship between said first and second indicator 
said first and second indicator signals initially having a numbers to transmit a first reset signal to said meter 
predetermined relationship; in each credit resetting 40 apparatus in respect to a first credit update value relat- 
transaction of the series establishing communication ing to a current resetting transaction between the meter 
between the franking meter apparatus and the remote apparatus and the terminal apparatus and operative in 
resetting terminal apparatus; carrying out a credit reset- response to said comparison means indicating absence 
ting routing in which a credit reset signal is transmitted of said predetermined relationship to transmit a second 
from the terminal apparatus to the meter apparatus and 43 reset signal to said meter apparatus in respect of a see- 
the value in the credit register of the meter apparatus is ond credit update value relating to a preceding credit 
reset in response receipt by the meter apparatus of the transaction in which a failure to reset the value of credit 
credit reset signal; incrementing the first indicator sig- in the credit register occurred. . 
nal in response to resetting of the value in the credit nP<;niTl>TTn>J of thf np a wmr 
register of the meter and incrementing the second indi- 50 ^^^^ DESCRIPTION OF THE DRAWING 
cator signal in response to completion of a resetting An embodiment of the invention will now be de- 
routine at the terminal; in each credit resetting transac- scribed by way of example with reference to the draw- 
tion after an initial resetting transaction of the series of ings m which: 

transactions checking the reset status of the credit regis- FIG. 1 is a block diagram showing franking meters 

ter of the meter apparatus by transmitting the first indi- 55 connected by telephone network to a remote resetting 

cator signal from the meter to the terminal; at the termi- terminal, 

nal apparatus comparing the first and second indicator FIGS. 2A and 2B are a fiow chart of a resetting rou- 

signals; detection of said predetermined relationship tine carried out by the franking meter, and 

between said first and second indicator signals provid- FIGS. 3A and 3B are a flow chart of a resetting rou- 

ing a reset status indication that the value in the credit 60 tine carried out by the resetting terioiinal. 

register was successfully reset in said preceding transac- ^ ^ « ^ ^ 

tion and detection of absence of said predetermined ^^^^^'^iS?^^^™^ 

relationship providing a reset status indication that the EMBODIMENT 

value m the credit register was not reset in the preced- Referring to FIG. 1 of the drawings, franking meters 

ing transaction. 65 lOi, lOi. . . 10„ arc connected via modems 11 1, llj. . . 

According to a third aspect of the invention remote Unto a telephone network 12. Similarly a remote termi- 

resetting terminal apparatus for resetting a value of nal 13 at a postal authority resetting centre is connected 

credit available for franking transactions in a credit to the telephone network by a modem 14. 
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The franking meters lOi, IO2 . . . lOn are of the ssune with an auto-dialliiig routine whereby the meter reads 
construction and operate in the sanie manner. Accord- the telephone number allocated to the remote terminal 
ingly only one franking meter lOi will be descritei in stored in the non-volatile memory 27 of the meter and 
detail. The franking meter lOi comprises a secure hous- transmits dial pulses, or tones, corresponding to the 
ing within which electronic accounting and control 5 telephone number. If such auto-dialling is not provided, 
circuits are located. The electronic circuits include a a telephone handset 23 is connected m parallel with the 
micro-processor 15 operating under the control of soft- modem to enable a user wishing to cause communica- 
ware routines stored in a read only program memory tion of the franking meter with the remote terminal to 
(ROM) 16 to cany out accounting and control fimc- monitor the progress of the telephone call and to dial 
tions of the meter. The meter is provided with a key- 10 the appropriate telephone number. It will be appreci- 
board 17 which has numeric keys and control keys for ated that if the telephone network operates digitally, the 
entry, by a user of the meter, of data and control signals modems are not required and the frahkmg machine 10 
respectively to the micro-processor 15 and a display 18 and the remote terminal 13 are connected directly to the 
for display of data and machine status signals to the telephone network 12. The firankmg meter includes a 
user. Non-volatile memories 19 and 20 are provided for 15 printer 24 controlled by the microprocessor 15 to print 
storing accounting data relating to usage of the meter in franking impressions on mail items. The franking im- 
carrying out franking operations. A random access pressions contains a value of postage selected by a user 
memory (RAM) 21 is provided as a working store for by keying in the selected value on the keyboard 17. 
the micro-processor. The memories 19, 20 each provide The resetting terminal 13 comprises a computer 
a credit register for value of credit remaining available 20 which includes a processor 28 operating under the con- 
for use in franking, a tote register fo r accmnulated vd ue trol of program routines stored in a memory 29 and a 
of franking carried out by the meter, an items register random access memory 25 for storing customer re- 
fer the number of items franked by the meter and a high cords. For conmiunication with franking meters via the 
items register for the number of items franked by the telephone network 12, the processor 28 is connected to 
meter with a value of postage charge above a predeter- 25 the modem 14 by means of interface circuits 26. It is to 
mined value. Each register is duplicated within each of be understood that the memories 29 and 25 are non- 
the memories. Thus each item of accounting data is. volatile and retain data stored therein in the event of a 
stored in f our re gisters thereby ensuring that, in the power failure. 

eVeat 6t an tfrto r in Operation oi the memones or the When a user requires additional credit for use in 
" a&uiuuting LiiCiilU>, Intefefity ot tne accounnng aatalo franking, the user operates a control key of the key- 
s iored in the meter can be checked and if an error is board 17 to mitiatc a credit resetting mode of operation 
detected the correct accounting data can be restored. In in which a resetting program routine is operated. The 
each franking operanon, tne credit raters are each main steps of the resetting program routine are illus- 
decremented by the value of the postage charge, the trated by the flow chart of FIG. 2. The microprocessor 
tote registers ar e incremented b y the value of postage 35 15 operates under the resetting program routine and 
charge and the item count is incremented by one. In causes the display 18 to indicate to the user that the 
addition, if the mail item is franked with a postage value meter is in resetting mode. In order to prevent xmautho- 
in excess of a predetermined value, the high items count rised personnel using the resetting mode to reset the 
is incremented by one. Prior to carrying out each frank- credit m the meter, after START at 30 of the routine, 
ing "operation, the micro-processor reads the credit 40 the user is required to enter a personal identification 
value in the credit regbters to ensure that the credit number (PIN) at 31 by means of the keyboard. FoUow- 
value is higher than a predetermined value and that the ing this, the amount of credit required is entered at 32 
credit value is sufficient for the postage charge of the by means of the keyboard- As the user keys in the PIN 
intended franking. If the credit value is less than the and amount of credit required, the PIN and credit 
predetermined value, the meter locks and cannot be 45 amount are displayed respectively on the display 18 to 
used for further franking until the credit register has enable the user to verify that the PIN and credit amount 
been reset with additional credit A non- volatile mem- keyed in are correct. If the user realises that an error has 
ory 27 is provided for storing data utilised in remote been made in entering the PIN. or if the user wishes to 
resetting of the franking meter. Such data includes per- revise the amount of credit required, the respective 
manent data such as meter identification data compris- 50 entry may be cancelled at 33 or 34 and the user may 
ing a meter licence number and the telephone number of re-enter the PIN at 35 and credit amount at 36 required 
the remote resetting centre 13 with which the meter as appropriate. The microprocessor of the meter opens 
communicates to effect resetting of the credit register of communication at 37 via the modem 11 with the tele- 
the meter. phone network 12, and if an auto-dialling facility is 

Resetting of the meter with additional credit is ef- 55 provided, the microprocessor reads out the telephone 
fectcd by means of inter-acting routines effected by the number of the resetting terminal from the non-volatile 
franking meter and the remote resetting terminal 13 via memory 27 and sends corresponding dialling pulses, or 
conmiunication over the telephone network 12. Gener- tones if the telephone network operates on tone dialling, 
ally such resetting routines will be initiated by a user at to the telephone network to establish telephonic com- 
the location of the franking meter. In order to enable 60 munication with the remote resetting terminal. If an 
the meter to communicate via the telephone network, auto-dialling facility is not provided the user dials the 
an input/output interface circuit 22 is connected be- remote terminal number on the telephone handset 23 
tween input/output ports of the micro-processor 16 and and when an answer signal, which may be tone.or com- 
the modem 111. The modem Hi may be an external unit, puter generated voice, is received from the remote 
as illustrated in the drawing, connected to the meter by 65 terminal the user replaces the handset When the dial- 
plug and socket connection or may be located internally ling is effected manually by means of the handset, the 
of the meter housing with a plug and socket connection meter program routine allows a predetermined time 
to the telephone network- The meter may be provided period for replacement of the handset prior to continu- 
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ing with the credit resetting routine. The meter then at 72 for display by the meter. If the meter bearing the 
sends a 'request payment' message at 38 comprising the licence number in the request credit message has not yet 
personal identification number, the payment amount been installed in an authorised procedure or the licence 
required, a transaction indicator number (IDN) and the number is not recognised by the resetting terminal, the 
meter licence number to the resetting terminal. The .5 terminal sends a 'request refused' message to the meter, 
transaction indicator number comprises a number The resetting terminal sends a series of messages to 
stored in the non-volatile memory 27 of the meter and the meter to read and send to the terminal in encrypted 
which is incremented each time the credit register of the format the accounting data held in the registers of the 
meter is reset with an up-dated credit value in a remote non-volatile memories 19, 20 of the meter. The resetting 
resetting routine by the resetting terminal. Thus the 10 terminal sends an *encrypt credit register request' mes* 
IDN stored in the meter provides an indication of the sage at 73 to the meter to read the contends of the credit 
resetting transaction sequence status as regards re-set- register. This message contains a random number gener- 
ting of the credit register of the meter. If desired the ated by the resetting terminal. Upon receipt at 43 of the 
transaction indicator number may be incremented lin- 'encrypt credit register request* message the meter re- 
early or in any other predetermined and predictable 15 sponds to this message by reading the contents of the 
manner. The resetting terminal also stores an IDN cor- credit register and transmitting a 'encrypt credit regis- 
responding to the IDN stored in the meter as will ex- ter* message at 44 to be received at 74 by the resetting 
plained hereinafter. terminal. This message contains this credit value and the 
The resetting terminal is arranged to carry out a random number encrypted. The terminal sends a series 
credit resetting program routine, the main steps of 20 of similar request messages at 75, 76 and 77 to the meter 
which are illustrated by the flow chart of FIG. 3, when to read the contents of the tote register, the items count 
communication between the meter and the terminal is register and the high items register in the meter. Bach of 
opened. Upon receipt of the 'request payment* message these 'encrypt register request' messages includes a 
at 60 from one of the meters lOi . . . lOn, the processor random number as explained hereinbefore. In response 
28 of the resetting terminal accesses a record of cus- 25 to receipt at 45, 46 and 47 of these 'encrypt register 
tomer data at 61 in memory 25 relating to the specific request* messages respectively, the meter returns 'en- 
meter, as identified by the received licence number, crypted tote register* at 48, encrypted items register at 
which has opened communication with the terminal. 49 and encrypted high items register at 50 messages 
The record of customer data includes the personal iden- including the value of the content of the corresponding 
tification number or numbers authorised for each meter 30 register together with the random number received in 
as identified by the meter licence number. The terminal the 'encrypt register request' message. These messages 
compares at 62 the received personal identification are received by the terminal respectively at 78, 79 and 
number with the personal identification number(s) in 80. The terminal also sends a 'fault history register re- 
the stored record for the received licence number. The quest' message at 81 received by the meter at 51. The 
customer record also contains data relating to the credit 35 meter responds by sending a 'fault history register* mes- 
status of the customer. If the received personal identifi- sage at 52 which is received by the terminal at 82. The 
cation number matches that for the meter licence num- random number included in the 'encrypt register* mes- 
ber in the stored record, flow line 'YES' 63, and the sage presenting the register value to the terminal is the 
amount of credit requested in the . payment request is random number transmitted to the meter by the termi- 
acceptable as regards the credit status of the customer 40 nal in the 'encrypt register request' message requesting 
and as regards any limits which may be imposed on the the register value. The terminal checks that the random 
amount of credit which may be requested, as deter- number received in the 'encrypt register' message from 
mined by 'CREDIT VALID'? at 64, the resetting ter- the meter is the same as that sent to the meter in the 
minal proceeds, flow line 65, with the credit resetting 'present encrypt register' message. In a resetting trans- 
program routine. However if the request for credit is 45 action, the same random number may be used in each 
unacceptable, flow line 66, for example it is for too large message requesting values of different registers or if 
an amount of credit, the terminal returns a 'CREDIT desired the random number may be different for each 
INVALID' message at 67. Of if the personal identifica- request message. 

tion number is incorrect, flow line 'NO' 68, the terminal The resetting terminal stores in the customer record 
returns a 'PIN invalid* message at 69 to the meter. The 50 in memory 25 a transaction indicator number (IDN) 
messages sent at 67 and 69 contain an indication relating relating to each of the meters. The IDN relating to a 
to the error which has occurred and this causes an ai>- meter and stored in the resetting terminal is incre- 
propnate indication to be displayed to the user. If the mented at 83 each time the terminal completes a reset- 
amount of credit requested is too large the resetting ting routine in respect of the meter. It is preferred that 
routine is terminated. However if desired, if the meter 55 this is at the stage when the terminal initiates a billing 
receives the 'CREDIT INVALID' message at 39, the operation at 84 by which the customer or user of the 
user may be permitted to enter at 40 a new smaller meter is charged for credit issued by the terminal for the 
amoimt of credit If the personal identification number meter. Thus the IDN stored at the remote resetting 
is mcorrect 'PIN INVALID' message received at 41, terminal provides an indication of the resetting transac- 
the user may enter an alternative personal identification 60 tion sequence status as regards billing of the user for the 
number at 42. When an incorrect personal identification value of credit issued by the tenmnal. Initially the IDN 
number is entered and the user enters further numbers in the terminal is equal to the IDN in the meter. The 
as identification numbers the resetting terminal logs at IDN in the meter is incremented at 57 each time the 
70 the number of sequential incorrect personal identifi- credit register of the meter is reset remotely and accord- 
cation numbers received. If a predetermined limit 'n* of 65 ingly for each credit reset transaction in which resetting 
entered personal identification numbers is reached, flow of the credit register of the meter is accomplished suc- 
line 'YES' 71, the resetting terminal rejects any further cessfully the IDNs in the terminal and in the meter are 
requests for credit and sends a 'request refused* message incremented and remain in step and are equal to one 
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another. The resetting terminal compares at 85 the IDN preceding requested amoimt of credit for which billing 
received from the meter in the 'payment request' mes- of the customer has already been effected at 84 in the 
sage with the IDN relating to that meter stored in the preceding reset transaction. It will be understood that 
customer records at the terminal. If the IDNs are equal, because the credit reset program routine in the meter 
flow line 'YES* 86» it indicates that the credit register of S was interrupted, the TID stored in the meter was not 
the meter was successfully updated with the new credit incremented at 58. Accordingly when the terminal de- 
value in the preceding credit reset transaction. tects that there is an incremental difference between the 

The resetting terminal then sends an 'encrypted IDNs, the TID included in the 'encrypt reset* message 
credit reset* message at 87 which contains the credit is the TID ciirtendy stored m the terminal, 
amount requested by the user together with a transac- 10 It is to be understood that if the resetting terminal 
tion identity code (TID) in the form of an encrypted carries out and completes a resetting routine at 91 and, 
data block. This 'encrypted credit reset* message is for example, initiates billing of the user but, due to an 
received by the meter at 53. The transaction identity unpredicted mterruption in the transaction routine wijh 
code comprises a pseudo-random number generated by the meter, the meter fails to reset the credit register with 
a pseudo-random number generator in the resetting 15 the required new updated credit value the IDN at the 
terminal. The meter also includes a pseudo-random resetting terminal is incremented but the IDN stored in 
number generator which corresponds to that in the the meter is not incremented and remains at its previous 
resetting terminal. Initially both the meter and the reset- value. As part of the resetting routine the resetting 
ting terminal store corresponding pseudo-random num- terminal receives the IDN currently stored in the meter 
bers. Thus prior to a payment request the meter is stor- 20 and compares this received IDN with the IDN stored at 
ing in non-volatile memory 27, a pseudo-random num- the resetting terminal. If the IDNs correspond the reset- 
ber generated by the generator in the meter. Upon ac- ting termina] continues with resetting the credit register 
ceptance of a payment request, the resetting terminal of the meter with the amount of credit in the current 
generates the pseudo-random number at 38, corre- request for credit However if value of the IDN re- 
sponding to that stored in the meter, and includes this 25 ceived from the meter is one less than the value of IDN 
pseudo-random number in the 'encrypted credit reset* stored at the terminal, indicating that the credit register 
message. Upon receipt of the 'encrypted credit reset' of the meter failed to be updated in the previous transac- 
message at 53 by the meter, the microprocessor 15 com- tion, the terminal proceeds to reset the credit register 
pares at 54 the TID contained in the 'encrypted credit with the required value of credit contained in the previ- 
resef message with the TID stored in memory. If the 30 ous request. After sending the value of credit contained 
comparison at 54 indicates identity between the TIDs, in the previous request at 90 and completing the reset- 
flow line *YES* 55, the meter is enabled to add the ting routine in respect of that request, communication is 
credit up-date amount at 56 to the credit register in the terminated at 95 and the terminal and meter terminate 
memories 19, 20 and the pseudo-random number TDD is the resetting routine at 92 and 96, respectively. How- 
incremented at 58 to the next number in the series of 35 ever if desired resettixiig routine may include sending the 
pseudo-random numbers. If identity is not found, flow value of credit in the current request and then complet- 
line 'NO* 93, the payment transaction is not permitted to ing the resetting routine. The meter maybe arranged to 
continue and failure of the transaction at 94 is indicated detect that an attempt to reset credit in the meter is not 
on the display to the user. At this stage the value in the completed and, if the meter is provided with an auto- 
credit register has not been modi^ed by the addition of 40 dialling facility, the meter may be arranged to retry a 
the requested payment and the meter can continued to credit resetting routine for the same amount of credit 
be used for franking transactions but only with the automatically. It will be appreciated that in such a situa- 
current credit value remaining in the credit register. tion the value of IDN received by the terminal will 

If the resetting terminal has effected a reset program indicate to the terminal that the preceding attempt to 
routine in which billing of the customer has been initi- 45 reset credit in the meter was not completed, 
ated but due to an unpredicted failure the credit register While the memory 27 is shown in FIG. 1 as being 
of the meter has not been reset the IDN in the termmal separate from the memories 19, 20, it is to be understood 
is incremented at 83 but the credit reset program routine that the registers implemented by the memory 27 may 
of the meter does not proceed to the step at 57 of incre- be implemented instead by storage locations within one 
menting the IDN in the meter. As a result the EDNs will 50 or both memories 19, 20. 

be out of step. Failure to reset the credit register in the It will be appreciated that any of the message referred 
meter may result from an unpredictable failure in com- to hereinbefore which contain data which it is desired 
munication between the terminal and the meter or due to keep secure would be transmitted in encrypted form 
to a system failure in the meter. Accordingly when the and decrypted by the receiving meter or terminal re- 
terminal compares at 85 the IDN received from the 55 spectively. Those messages which contain only data 
meter with the IDN stored in the terminal the IDN will which it is not necessary to keep secure may be trans- 
differ by an increment and this incremental difference mitted without encryption. However it may be conve- 
between the IDNs provides an indication to the tenni- nient in order to handle all messages in the same manner 
nal that in the preceding resetting transaction for that to encrypt all messages at the transmitter and to decrypt 
meter there was a failure to reset the credit register of 60 all messages at the receiver. 

the meter. When the comparison at 85 indicates, flow The resetting terminal preferably maintains a record 
line 'NO* 89, that the IDNs differ by the increment, the of account for the user which contains a value of credit 
terminal sends an 'encrypt resef message at 90 which, available for allocation to a user of the franking meter, 
instead of the current requested credit amount, contains After the terminal has sent the 'encrypt reset' message 
the preceding requested amount of credit Hius the 65 the credit available for allocation to the user is decre- 
terminal, in response to detection of the incremental mented by the credit up-date amount. The value of 
difference in the IDNs, carries out steps in the resetting credit available for allocation may be purchased in ad- 
routine to reset the credit register of the meter with the vance or, if permitted by the postal authority, an agreed 
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limit of credit may be made available for which, pay- 
ment is made in arrears. The record of account is uti- 
lised for preparing the billing by which the customer is 
charged for credit transmitted by the terminal for a . 
meter. 5 

While the communication between the franldng 
meter and the resetting terminal has been described 
hereinbefore as utilising a telephone network, if desired 
the communication may be by way of a dedicated trans- 
mission line or by other forms of communication such as 
radio communication. 

Each message may include a task identification to 
enable the meter and the terminal to identify messages 
receives from the terminal and meter respectively. 

After sending the 'request payment* message, the 
meter may indicate an error condition if a correct re- 
sponse message is not received back from the terminal 
within a predetermined time period, for example 30 
seconds. While the meter is waiting for a response from 
the tenninal all keyboard inputs are ignored by the 
micro-processor. 

In the event of communication failure or power fail- 
ure at the meter, the meter remains available for frank- 
ing transactions when power is available. Upon re- 
establishment of communication or power, the resetting 
routine, if not completed, can be re-initiated. As de- 
scribed hereinbefore comparison by the terminal of the 
IDNs stored in the meter and in the terminal enables the 
terminal to determine whether the resetting routine ^ 
effected resetting of the credit register of the meter with 
the requested credit amount or that the credit register 
was not reset and the requested amount needs to by 
resent by the terminal. Conveniently the IDN in the 
meter and the terminal are equal and remain equal after 33 
each successftd completion of a resetting routine. How- 
ever if desired the IDNs may be different and be main- 
tained to have a predetermined relationship other than 
equality. The IDNs provide an indication of synchroni- 
sation status of the meter and terminal and is not secure 40 
information. The IDNs may be a relatively small inte- 
ger incremented by unity on a recirculating basis. 

In order to overcome problems which could arise due 
to unexpected lockout of the meter due to low credit 
and to difficulty in establishing commimication between 45 
the franking meter and the terminal, the meter may be 
arranged to provide advance warning that lock out of 
the meter is likely to occur shortly due to the credit 
value decreasing to below a predetermined limit. This 
has the effect of providing a tolerance to low credit 50 
limit thereby enabling the user to continue using the 
franking meter for a limited amount of franking after 
provision of the warning. 

We claim: 

1. A method of remotely resetting credit available for 55 
use in the franking transactions of franking meter appa- 
ratus, said franking meter ^paratus including a de- 
scending credit register storing a value of credit avail- 
able for use in franking transactions; including the steps 
of: 60 
generating a first indicator signal at the meter; 
generating a second indicator signal at a remote reset- 
ting tenninal apparatus; 
establishing commimication between the franking 
meter apparatus and the remote resetting terminal 65 
apparatus; 

transmitting the first indicator signal from the meter 
to the terminal; 



at the terminal apparatus comparing the first and 
second indicator signals; 

in response to detection of a first relationship between 
said first and second indicator signals transmitting a 
first credit reset signal from said terminal apparatus 
to said meter ^paratus to enable the meter appara- 
tus to reset the value of credit available for frank- 
ing stored in the credit register of said meter appa- 
ratus by adding a first credit update amount to said 
value of credit and in response to detection of a 
second relationship between said first and second 
indicator signals transmitting a second credit reset 
signal from the terminal apparatus to the meter 
apparatus to enable the meter apparatus to reset the 
value of credit available for franking stored in the 
credit register of the meter apparatus by adding a 
second update credit amount to said value of 
credit. 

2. A method of remotely resetting credit as claimed in 
claim 1 including the steps of storing a first pseudo-ran- 
dom number in the meter apparatus; 

generating a second pseudo-random number in the 
resetting terminal apparatus, said second pseudo* 
random number corresponding to said first pseudo- 
random number; including said second pseudo-ran- 
dom number in the reset signal transmitted from 
the tenninal apparatus to the meter apparatus; 

in the meter comparing the first and second pseudo- 
random numbers and in response to the comparison 
indicating that the first and second pseudo-random 
numbers correspond resetting the value in the 
credit register by an amount determined by the 
reset signal. 

3. A claim of remotely resetting credit in a series of 
credit resetting transactions of credit available for use in 
franking transactions of franking meter apparatus, said 
franking meter apparatus including a descending credit 
register storing a value of credit available for use in the 
franking transactions; including the steps of: 

generating a first indicator signal at said franking 
meter apparatus; generating a second indicator 
signal at a remote resetting terminal apparatus, said 
first and second indicator signals initially having a 
predetermined relationship; 

and in each current credit resetting transaction of said 
series of credit resetting transactions the steps of 
establishing communication between said franking 
meter apparatus and said remote resetting terminal 
apparatus; 

carrying out a first credit resetting routine at said 
remote resetting terminal apparatus including 
transmitting a credit reset signal from said remote 
resetting terminal apparatus to said franking meter 
apparatiis to enable said franking meter apparatus 
to reset the value of credit stored in said descend- 
ing credit register of said franking meter apparatus; 

carrying out a second credit resetting routine at said 
franking meter ^paratus including resetting the 
value of credit stored in said descending credit 
register in response to receipt by said franking 
meter apparatus of said credit reset signal; 

incrementing said first indicator signal m response to 
resetting the value of credit in said descending 
credit register of said franking meter apparatus; 

incrementing said second indicator signal in response 
to completion of said first resetting routine at said 
remote resetting tenninal apparatus; 
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tiansmitdDg said first indicator signal from said ficank- 
ing meter apparatus to said remote resetting termi- 
nal apparatus; 

at said remote resetting terminal apparatus comparing 
said first and second indicator signal and in re- ^ 
sponse to detecting said predetermined relationship 
between said first and second indicator signals 
generating a first reset status signal indicating that 
the value of credit in said descending credit register 
was successfully reset in a credit resetting transac- 
tion preceding the current credit resetting transac- 
tion and in response to detecting a relationship 
different from S£ud predetermined relationship gen- 
erating a second reset status signal indicating that ^5 
the value of in said descending credit register was 
not reset in said credit resetting transaction preced- 
ing said current credit resetting transaction. 

4. A method as claimed in claim 3 including the steps 
of: 20 

resetting the value of credit in the descending credit 
register of the franking meter apparatus by a first 
update amount determined by a current credit reset 
signal transmitted by the remote resetting terminal 
apparatus in the current transaction of the series of 25 
credit resetting transactions m response to detect- 
ing the predetermined relationship and resetting 
the value of credit in the descending register of the 
franking meter apparatus by a second update 
amount determined by a preceding credit reset 
signal transmitted by the terminal apparatus in the 
credit resetting transaction preceding the current 
credit resetting transaction in response to failing to 
detect said predetermined relationship. 33 

5. A method of remotely resetting credit as claimed in 
claim 4 including the steps of storing a first pseudo-ran- 
dom number in the franking meter apparatus; 

generating a second pseudo-random number in the 
remote resetting terminal apparatus, said second 40 
pseudo-random number corresponding to said first 
pseudo-random number; 

including said second pseudo-random number m the 
credit reset signal transmitted from said remote 
resetting terminal apparatus to the franking meter 
apparatus; 

at said franking meter apparatus comparing the first 
and second pseudo-random numbers and in re- 
sponse to the comparison indicating that the first 
and second pseudo-random nimibers correspond 
resetting the value of credit in the descending reg- 
ister by an amount determined by the credit reset 
signal. 

6. A method as claimed in claim 4 wherein the prede- 
tennined relationship is equality. 

7. Remote resetting terminal apparatus for resetting a 
value of credit available for franking transactions in a 
credit register of franking meter apparatus in a series of 
resetting transactions including: go 

means to generate a first indicator signal; means to 
receive a second indicator signal from franking 
meter apparatus, said first and second indicator 
signals initially having a predetermined relation- 
ship; 65 



50 



means operable in each current credit resetting trans- 
action to compare said first and second indicator 
signals; 

means operative in response to detection of said pre- 
determined relationship between said first and sec- 
ond indicator signals to transmit a current credit 
reset signal relating to the current credit resetting 
transaction and operative in the absence of detec- 
tion of said predetermined relationship to transmit 
a preceding credit reset signal relating to a credit 
reset transaction immediately preceding the cur- 
rent transaction. 

8. Remote resetting terminal apparatus as claimed in 
claim 7 wherein the predetermined relationship is equal- 
ity. 

9. A franking meter system comprising at least one 
franking meter apparatus and remote resetting terminal 
apparatus; 

communication means providing communication be- 
tween the meter apparatus and the remote resetting 
terminal apparatus; 

said franking meter apparatus including a credit regis- 
ter to store a value of credit available for use by 
said franking meter apparatus in franking transac- 
tions to frank mail items with a postage charge; 

reset means operable to reset the value of credit in the 
credit register to an updated value of credit; 

means to generate a first indicator number and to 
increment said indicator ntunber in response to 
resetting of credit in the credit register; 

said remote resetting terminal apparatus including 
means operable to carry out a credit resetting rou- 
tine; 

indicator means to generate a second indicator num- 
ber said first and second indicator numbers initially 
having a predetermined relationship and said indi- 
cator means being operative to increment said sec- 
ond indicator number in response to completion of 
said credit resetting routine; 

comparison means to compare the first and second 
indicator numbers; 

means operative in response to said comparison 
means indicating said predetermined relationship 
between said first and second indicator numbers to 
transmit a first reset signal to said franking meter 
apparatus in respect of a first updated value of 
credit relating to a current resetting transaction 
between said franking meter apparatus and said 
remote resetting terminal apparatus and operative 
in response to said comparison means indicating a 
relationship different from said predetermined rda- 
tionship to transmit a second reset signal to said 
franking meter apparatus in respect of a second 
updated value of credit relating to a credit resetting 
transaction preceding said current credit resetting 
transaction in which a failure to reset the value of 
credit in the credit register to the second updated 
value of credit occurred; 

said credit reset means of said franking meter appara- 
tus being operated in response to receipt of the 
reset signal from the remote resetting terminal 
apparatus. 

10. A franking meter system as claimed in claim 9 
wherein the predetermined relationship is equality. 
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